hi,
hier der logfile:
Code:Logfile of HijackThis v1.99.1 Scan saved at 18:00:34, on 21.02.2005 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: F:\WINNT\System32\smss.exe F:\WINNT\system32\winlogon.exe F:\WINNT\system32\services.exe F:\WINNT\system32\lsass.exe F:\WINNT\system32\svchost.exe F:\WINNT\system32\spoolsv.exe F:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe F:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe F:\WINNT\system32\crypserv.exe F:\WINNT\System32\svchost.exe F:\WINNT\system32\regsvc.exe F:\WINNT\system32\MSTask.exe F:\WINNT\system32\stisvc.exe F:\WINNT\system32\ZoneLabs\vsmon.exe F:\WINNT\System32\WBEM\WinMgmt.exe F:\WINNT\Explorer.EXE F:\WINNT\System32\mspmspsv.exe F:\WINNT\system32\svchost.exe F:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe F:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe F:\Programme\Zone Labs\ZoneAlarm\zlclient.exe F:\Programme\Microsoft AntiSpyware\gcasServ.exe F:\Programme\1&1 Programme\cFos\cFosDNT.exe F:\WINNT\system32\rundll32.exe F:\Programme\Microsoft AntiSpyware\gcasDtServ.exe F:\Programme\Telekom\T-Eumex 220PC\Capictrl.exe F:\PROGRA~1\MICROS~2\Office\OUTLOOK.EXE F:\Programme\hijack\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - F:\Programme\NewDotNet\newdotnet4_85.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: @msdxmLC.dll,-1@1031,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINNT\System32\msdxm.ocx O4 - HKLM\..\Run: [AVG7_CC] F:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [AVG7_EMC] F:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O4 - HKLM\..\Run: [Zone Labs Client] "F:\Programme\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [gcasServ] "F:\Programme\Microsoft AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [CFosDNT] F:\Programme\1&1 Programme\cFos\cFosDNT.exe O4 - HKLM\..\Run: [New.net Startup] rundll32 F:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup O4 - Global Startup: capicontrol.lnk = F:\Programme\Telekom\T-Eumex 220PC\Capictrl.exe O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O17 - HKLM\System\CCS\Services\Tcpip\..\{BEB6E761-D02C-4CB8-B81B-A15B082D9B7E}: NameServer = 217.237.150.141 217.237.150.97 O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: Crypkey License - Kenonic Controls Ltd. - F:\WINNT\SYSTEM32\crypserv.exe O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - F:\WINNT\System32\dmadmin.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - F:\WINNT\system32\ZoneLabs\vsmon.exe
